From owner-freebsd-net@FreeBSD.ORG Wed Nov 14 07:06:55 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D1BC91DE for ; Wed, 14 Nov 2012 07:06:55 +0000 (UTC) (envelope-from fernando@gont.com.ar) Received: from web01.jbserver.net (web01.jbserver.net [93.186.182.34]) by mx1.freebsd.org (Postfix) with ESMTP id 8E68A8FC13 for ; Wed, 14 Nov 2012 07:06:54 +0000 (UTC) Received: from [186.134.15.187] (helo=[192.168.123.122]) by web01.jbserver.net with esmtpsa (TLSv1:DHE-RSA-CAMELLIA256-SHA:256) (Exim 4.80.1) (envelope-from ) id 1TYWZw-00060T-LX; Wed, 14 Nov 2012 07:36:05 +0100 Message-ID: <50A338FB.9060602@gont.com.ar> Date: Wed, 14 Nov 2012 03:23:55 -0300 From: Fernando Gont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121028 Thunderbird/16.0.2 MIME-Version: 1.0 To: Dustin Wenz Subject: Re: Default ephemeral port range References: <87A2D317-77BA-4641-979D-0AE43247D99E@ebureau.com> In-Reply-To: <87A2D317-77BA-4641-979D-0AE43247D99E@ebureau.com> X-Enigmail-Version: 1.4.5 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 07:06:55 -0000 On 11/12/2012 02:57 PM, Dustin Wenz wrote: > I'm trying to determine why the default ephemeral port range appears > to be 10000 through 65535 in at least 8.1 through 9.1RC. I had produced the patch that extended the ephemeral port range in FreeBSD. My original patch extended the ephemeral port range to 1024-65535. However, it was noted that X uses ports in the range 1024-10000, and hence it was better to exclude that port range from the ephemeral port range. > The IANA recommends the range be 49152 through 65535 > (http://tools.ietf.org/html/rfc6056). IANA *used* to recommend that range. In RFC 6056 we recommend implementations to use the largest possible port range -- ideally 1024-65536. > Is there any particular reason > why net.inet.ip.portrange.first defaults to 10000? Please see above. Cheers, -- Fernando Gont e-mail: fernando@gont.com.ar || fgont@si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1